Link to home
Start Free TrialLog in
Avatar of amanzoor
amanzoorFlag for Canada

asked on

Opening Range of ports on Cisco 2811 Router

Hi
I need to open range of ports on an external ip:  For this first I will map the local ip to the external IP in the access list like:

ip nat inside source static 10.10.10.101 64.xxx.xx.xxx

and then open the ports like this

access-list 101 permit tcp any host 64.xxx.xx.xxx eq 69
access-list 101 permit tcp any host 64.xxx.xx.xxx eq 3060
access-list 101 permit tcp any host 64.xxx.xx.xxx eq 3061
access-list 101 permit tcp any host 64.xxx.xx.xxx eq 3062
access-list 101 permit tcp any host 64.xxx.xx.xxx eq 3063
is the top correct??
Question:
Is there any command so that I can open up the range of ports i.e from 3060-3066
Also if I want to remove any particular line from access list: will this be correct?
no access-list 101 permit tcp any host 64.xxx.xx.xxx eq 3060 or the command to remove the line number?
Help plz
ASKER CERTIFIED SOLUTION
Avatar of Nugsolot
Nugsolot

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Nugsolot
Nugsolot

also on IOS you will remove the whole ACL when you do a no access-list 101,  just copy it an d edit then remove and repaste.


thanks
nugs
Avatar of amanzoor

ASKER

Superb
Thanks Nugsolot:
One more question:
THere is one local address on my router which is mapped to external address.  Its a security machine what is the best way from the router to check how much bandwidth that machine is consuming?
is there an easy way, commands will be helpful?
Thanks